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^ Abstract 

£f~^ \ We give a purely model-theoretic characterization of the semantics of logic 

programs with negation-as-failure allowed in clause bodies. In our semantics the 
meaning of a program is, as in the classical case, the unique minimum model in 
a program-independent ordering. We use an expanded truth domain that has 
an uncountable linearly ordered set of truth values between False (the minimum 
^ ■ element) and True (the maximum), with a Zero element in the middle. The truth 

values below Zero are ordered like the countable ordinals. The values above Zero 
have exactly the reverse order. Negation is interpreted as reflection about Zero 
followed by a step towards Zero; the only truth value that remains unaffected 
by negation is Zero. We show that every program has a unique minimum model 
Mp, and that this model can be constructed with a Tp iteration which proceeds 
through the countable ordinals. Furthermore, we demonstrate that Mp can also 
be obtained through a model intersection construction which generalizes the well- 
known model intersection theorem for classical logic programming. Finally, we 
show that by collapsing the true and false values of the infinite-valued model Mp 
to (the classical) True and False, we obtain a three-valued model identical to the 
well-founded one. 
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1 Introduction 



One of the paradoxes of logic programming is that such a small fragment of formal 
logic serves as such a powerful programming language. This contrast has led to many 
attempts to make the language more powerful by extending the fragment, but these 
attempts generally back-fire. The extended languages can be implemented, and are in 
a sense more powerful; but these extensions usually disrupt the relationship between 
the meaning of programs as programs and the meaning as logic. In these cases the 
implementation of the program-as-program can no longer be considered as computing 
a distinguished model of the program-as-logic. Even worse, the result of running the 
program may not correspond to any model at all. 

The problem is illustrated by the many attempts to extend logic programming with 
negation (of atoms in the clause bodies). The generally accepted computational inter- 
pretation of negated atoms is negation- as- failure. Intuitively, a goal ~A succeeds iff the 
subcomputation which attempts to establish A terminates and fails. Despite its simple 
computational formulation, negation-as-failure proved to be extremely difficult to for- 
malize from a semantic point of view (an overview of the existing semantic treatments 
is given in the next section). Moreover, the existing approaches are not purely model 
theoretic in the sense that the meaning of a given program can not be computed by 
solely considering its set of models. This is a sharp difference from classical logic pro- 
gramming (without negation), in which every program has a unique minimum Herbrand 
model (which is the intersection of all its Herbrand models). 

This paper presents a purely model-theoretic semantics for negation-as-failure in logic 
programming. In our semantics the meaning of a program is, as in the classical case, the 
unique minimum model in a program-independent ordering. The main contributions of 
the paper can be summarized as follows: 

• We argue that a purely declarative semantics for logic programs with negation-as- 
failure should be based on an infinite-valued logic. For this purpose we introduce 
an expanded truth domain that has an uncountable linearly ordered set of truth 
values between False (the minimum element) and True (the maximum), with a 
Zero element in the middle. The truth values below Zero are ordered like the 
countable ordinals while those above Zero have the reverse order. This new truth 
domain allows us to define in a logical way the meaning of negation-as-failure and 
to distinguish it in a very clear manner from classical negation. 

• We introduce the notions of infinite-valued interpretation and infinite-valued model 
for logic programs. Moreover, we define a partial ordering on infinite-valued 
interpretations which generalizes the subset ordering of classical interpretations. 
We then demonstrate that every logic program that uses negation-as-failure, has a 
unique minimum (infinite- valued) model Mp under C^. This model can be con- 
structed by appropriately iterating a simple T P operator through the countable 
ordinals. From an algorithmic point of view, the construction of Mp proceeds in 
an analogous way as the iterated least fixpoint approach |Prz89j . There exist how- 
ever crucial differences. First and most important, the proposed approach aims 



1 



at producing a unique minimum model of the program; this requirement leads to 
a more demanding logical setting than existing approaches and the construction 
of Mp is guided by the use of a family of relations on infinite-valued interpre- 
tations. Second, the definition of Tp in the infinite-valued approach is a simple 
and natural extension of the corresponding well-known operator for classical logic 
programming; in the existing approaches the operators used are complicated by 
the need to keep track of the values produced at previous levels of the iteration. 
Of course, the proposed approach is connected to the existing ones since, as we 
demonstrate, if we collapse the true and false values of Mp to (classical) True and 
False we get the well-founded model. 

• We demonstrate that by considering infinite-valued models, we can derive a model 
intersection theorem for logic programs with negation-as-failure. The model pro- 
duced by the model intersection theorem coincides with the model Mp produced 
by Tp. To our knowledge, this is the first such result in the area of negation (be- 
cause model intersection does not hold if one restricts attention to either two or 
three- valued semantical approaches). 

The rest of the paper is organized as follows: Section El discusses the problem of negation 
and gives a brief outline of the most established semantic approaches. Section El out- 
lines the infinite- valued approach. Section 0] introduces infinite-valued interpretations 
and models, and discusses certain orderings on interpretations that will play a vital 
role in defining the infinite-valued semantics. The Tp operator on infinite-valued inter- 
pretations is defined in Section El and an important property of the operator, namely 
a-monotonicity, is established. In Section El the construction of the model Mp is pre- 
sented. Section [7| establishes various properties of Mp, the most important of which is 
the fact that Mp is the minimum model of P under the ordering relation C^. Section |H] 
introduces the model intersection theorem and demonstrates that the model produced 
in this way is identical to Mp. Finally, Section |H1 concludes the paper with discussion 
on certain aspects of the infinite- valued approach. 

2 The Problem of Negation-as- Failure 

The semantics of negation-as-failure is possibly the most broadly studied problem in 
the theory of logic programming. In this section we first discuss the problem and then 
present the main solutions that have been proposed until now. 

2.1 The Problem 

Negation-as-failure is a notion that can be described operationally in a very simple way, 
but whose denotational semantics has been extremely difficult to specify. This appears 
to be a more general phenomenon in the theory of programming languages: 

"It seems to be a general rule that programming language features and con- 
cepts which are simple operationally tend to be complex denotationally, 
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whereas those which are simple denotationally tend to be complex opera- 
tionally" |AW82j . 



The basic idea behind negation-as-failure has as follows: suppose that we are given the 
goal <— ~ A. Now, if <— A succeeds, then <— ~ A fails; if <— A fails finitely, then <— ~ A 
succeeds. For example, given the program 

P <- 

r <— ~p 

s <— ~q 

the query <— r fails because p succeeds, while <— s succeeds because q fails. 

To illustrate the problems that result from the above interpretation of negation, 
consider an even simpler program: 

works <— ~tired 

Under the negation-as-failure rule, the meaning of the above program is captured by 
the model in which tired is False and works is True. 

Consider on the other hand the program: 

tired <— ~works 

In this case, the correct model under negation-as-failure is the one in which works is 
False and tired is True. 

However, the above two programs have exactly the same classical models, namely: 

M = {(tired, False), (works, True)} 
Mi = {(tired, True), (works, False)} 
M2 = {(tired, True), (works, True)} 

We therefore have a situation in which two programs have the same model theory 
(set of models), but different computational meanings. Obviously, this implies that the 
computational meaning does not have a purely model theoretic specification. In other 
words, one can not determine the intended model of a logic program that uses negation- 
as-failure by just examining its set of models. This is a very sharp difference from logic 
programming without negation in which every program has a unique minimum model. 

2.2 The Existing Solutions 

The first attempt to give a semantics to negation-as-failure was the so-called program 
completion approach introduced by Clark |Cla78j . In the completion of a program the 
"if" rules are replaced by "if and only if" ones and also an equality theory is added 
to the program (for a detailed presentation of the technique, see |Llo87j ). The main 
problem is that the completion of a program may in certain cases be inconsistent. To 
circumvent the problem, Fitting |Fit85j considered 3-valued Herbrand models of the 
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program completion. Later, Kunen [[Kun87j identified a weaker version of Fitting's 
semantics which is recursively enumerable. However, the last two approaches do not 
overcome all the objections that have been raised regarding the completion (see for 
example the discussion in [PP90 and in |vG93j ). 

Although the program completion approach proved useful in many application do- 
mains, it has been superseded by other semantic approaches, usually termed under the 
name canonical model semantics. The basic idea of the canonical model approach is 
to choose among the models of a program a particular one which is presumed to be 
the model that the programmer had in mind. The canonical model is usually chosen 
among many incomparable minimal models of the program. Since (as discussed in the 
last subsection) the selection of the canonical model can not be performed by just ex- 
amining the set of (classical) models of the program, the choice of the canonical model 
is inevitably driven by the syntax of the program. In the following we discuss the main 
semantic approaches that have resulted from this body of research. 

A semantic construction that produces a single model is the so-called stratified se- 
mantics ABW88 . Informally speaking, a program is stratified if it does not contain 
cyclic dependencies of predicate names through negation. Every stratified logic program 
has a unique perfect model, which can be constructed in stages. As an example, consider 
again the program: 

P «- 

r <— ~p 

s <— ~q 

The basic idea in the construction of the perfect model is to rank the predicate variables 
according to the maximum "depth" of negation used in their defining clauses. The 
variables of rank (like p and q above) are defined in terms of each other without use 
of negation. The variables of rank 1 (like r and s) are defined in terms of each other 
and those of rank 0, with negation applied only to variables of rank 0. Those of rank 
2 are defined with negations applied only to variables of rank 1 and 0; and so on. The 
model can then be constructed in stages. The clauses for the rank variables form a 
standard logic program, and its minimum model is used to assign values for the rank 
variables. These are then treated as constants, so that the clauses for the rank 1 
variables no longer have negations. The minimum model is used to assign values to the 
rank 1 variables, which are in turn converted to constants; and so on. 

An extension of the notion of stratification is local stratification |Prz88j ; intuitively, 
in a locally stratified program, predicates may depend negatively on themselves as long 
as no cycles are formed when the rules of the program are instantiated. Again, every 
locally stratified program has a unique perfect model |Prz88j . The construction of the 
perfect model can be performed in an analogous way as in the stratified case (the basic 
difference being that one can allow infinite countable ordinals as ranks). It is worth not- 
ing that although stratification is obviously a syntactically determinable condition, local 
stratification is generally undecidable [CB94 . It should also be noted here that there 
exist some interesting cases of logic programming languages where one can establish 
some intermediate notion between stratification and local stratification which is power- 
ful and decidable. For example, in temporal logic programming Org!) 1 OW92j many 
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different temporal stratification notions have been defined, and corresponding decision 
tests have been proposed |ZAU93t ILud98| IRonOlj . 

The stratified and locally stratified semantics fail for programs in which some vari- 
ables are defined (directly or indirectly) in terms of their own negations, because these 
variables are never ranked. For such programs we need an extra intermediate neutral 
truth value for certain of the negatively recursively defined variables. This approach 
yields the "well-founded" construction and it can be shown |vGRS9lj that the result 



is indeed a model of the program. Many different constructive definitions of the well- 
founded model have been proposed; two of the most well-known ones are the alternating 
fixpoint |vG89| lvG93| and the iterated least fixpoint jPrz89 . The well-founded model 
approach is compatible with stratification (it is well-known that the well-founded model 
of a locally stratified program coincides with its unique perfect model [vGRS91J). 

An approach that differs in philosophy from the previous ones is the so-called stable 
model semantics |GL88| . While the "canonical model" approaches assign to a given 
program a unique "intended" model, the stable model semantics assigns to the program 
a (possibly empty) family of "intended" models. For example, the program 

p <- ~p 

does not have any stable models while the program 

p <- ~q 
q <- ~p 

has two stable models. The stable model semantics is defined through an elegant stability 
transformation GL88J. The relationships between the stable model semantics and the 
previously mentioned canonical model approaches are quite close. It is well-known that 
every locally stratified program has a unique stable model which coincides with its unique 
perfect model [GL88j . Moreover, if a program has a two- valued well-founded model then 
this coincides with its unique stable model |vGRS91j (but the converse of this does not 
hold in general, see again [vGRS91J). Finally, as it is demonstrated in |Prz90j . the 
notion of stable model can be extended to a three-valued setting; then, the well-founded 
model can be characterized as the smallest (more precisely, the F-least, see [Prz90j) 
three-valued stable model. The stable model approach has triggered the creation of a 
new promising programming paradigm, namely answer-set programming jMT99t IGL02j . 

It should be noted at this point that the infinite-valued approach proposed in this 
paper contributes to the area of the "canonical model" approaches (and not in the area 
of stable model semantics). In fact, as we argue in the next section, the infinite- valued 
semantics is the purely model theoretic framework under which the existing canonical 
model approaches fall. 

The discussion in this section gives only a top-level presentation of the research that 
has been performed regarding the semantics of negation-as-failure. For a more in-depth 
treatment, the interested reader should consult the many existing surveys for this area 
(such as for example |A"B94l IBG94I lPP90l lFlt02] ) . 
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3 The Infinite- Valued Approach 



There is a general feeling (which we share) that when one seeks a unique model, then the 
well-founded semantics is the right approach to negation-as-failure. There still remains 
however a question about its legitimacy, mainly because the well-founded model is in 
fact one of the minimal models of the program and not a minimum one. In other words, 
there is nothing that distinguishes it as a model. 

Our goal is to remove the last doubts surrounding the well-founded model by pro- 
viding a purely model theoretic semantics (the infinite-valued semantics) which is com- 
patible with the well-founded model, but in which every program with negation has a 
unique minimum model. In our semantics whenever two programs have the same set of 
infinite-valued models then they have the same minimum model. 

Informally, we extend the domain of truth values and use these extra values to 
distinguish between ordinary negation and negation-as-failure, which we see as being 
strictly weaker. Consider again the program: 

P <- 

r <— ~p 

s <— ~q 

Under the negation-as-failure approach both p and s receive the value True. We would 
argue, however, that in some sense p is "truer" than s. Namely, p is true because there 
is a rule which says so, whereas s is true only because we are never obliged to make q 
true. In a sense, s is true only by default. Our truth domain adds a "default" truth 
value T\ just below the "real" truth T , and (by symmetry) a weaker false value iq just 
above ("not as false as") the real false F . We can then understand negation-as-failure as 
combining ordinary negation with a weakening. Thus ~T = T\ and ~T = iq. Since 
negations can effectively be iterated, our domain requires a whole sequence . . . , T3, T2, T\ 
of weaker and weaker truth values below To but above the neutral value 0; and a mirror 
image sequence iq, F 2 , T 3 . . . above F and below 0. In fact, to capture the well-founded 
model in full generality, we need a T a and a F a for every countable ordinal a. 

We show that, over this extended domain, every logic program with negation has a 
unique minimum model; and that in this model, if we collapse all the T a and F a to True 
and False respectively, we get the three-valued well-founded model. For the example 
program above, the minimum model is {(p, To), (q, To), (r, iq), (s, T)}. This collapses 
to {(p, True), (q, False), (r, False), (s,True)}, which is the well-founded model of the 
program. 

Consider now again the program works tired. The minimum model in this case 
is {(tired, T ), (works, Ti)}. On the other hand, for the program tired ^~works the 
minimum model is {(tired, 7\), (works, T )}. As it will become clearer in the next 
section, the minimum model of the first program is not a model of the second program, 
and vice-versa. Therefore, the two programs do not have the same set of infinite-valued 
models and the paradox identified in the previous section, disappears. Alternatively, in 
the infinite-valued semantics the programs works tired and tired works are 
no longer logically equivalent. 
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The proof of our minimum-model result proceeds in a manner analogous to the 
classical proof in the negation-free case. The main complication is that we need extra 
auxiliary relations to characterize the transitions between stages in the construction. 
This complication is unavoidable and due to the fact that in our infinite truth domain 
negation-as-failure is still antimonotonic. The approximations do converge on the least 
model, but not monotonically (or even anti-monotonically) . Instead (speaking loosely) 
the values of variables with standard denotations (T and F ) are computed first, then 
those (T\ and F\) one level weaker, then those two levels weaker, and so on. We need a 
family of relations between models to keep track of this intricate process (whose result, 
nevertheless, has a simple characterization). 



4 Infinite Valued Models 

In this section we define infinite-valued interpretations and infinite-valued models of 
programs. In the following discussion we assume familiarity with the basic notions of 
logic programming |Llo87j . We consider the class of normal logic programs: 



Definition 4.1 A normal program clause is a clause whose body is a conjunction of 
literals. A normal logic program is a finite set of normal program clauses. 

We follow a common practice in the area of negation, which dictates that instead of 
studying (finite) logic programs it is more convenient to study their (possibly infinite) 
ground instantiations [Fit02 : 

Definition 4.2 If P is a normal logic program, its associated ground instantiation P* 

is constructed as follows: first, put in P* all ground instances of members of P; second, 
if a clause A <— with empty body occurs in P* , replace it with A <— true; finally, if the 
ground atom A is not the head of any member of P* , add A ^— false. 

The program P* is in essence a (generally infinite) propositional program. In the rest 
of this paper, we will assume that all programs under consideration (unless otherwise 
stated) are of this form. 

The existing approaches to the semantics of negation are either two- valued or three- 
valued. The two- valued approaches are based on classical logic that uses the truth values 
False and True. The three-valued approaches are based on a three- valued logic that uses 
False, and True. The element captures the notion of undefined. The truth values 
are ordered as: False < < True (see for example |Prz89j ). 

The basic idea behind the proposed approach is that in order to obtain a minimum 
model semantics for logic programs with negation, it is necessary to consider a much 
more refined multiple-valued logic which is based on an infinite set of truth values, 
ordered as follows: 

Fq < Fi < • • • < F u < • • • < F a < • • • < < • • • < T a < • • • <T U < • • • < Ti <Tq 

Intuitively, F and T are the classical False and True values and is the undefined 
value. The values below are ordered like the countable ordinals. The values above 
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have exactly the reverse order. The intuition behind the new values is that they 
express different levels of truthfulness and falsity. In the following we denote by V the 
set consisting of the above truth values. A notion that will prove useful in the sequel is 
that of the order of a given truth value: 

Definition 4.3 The order of a truth value is defined as: order(T a ) = a, order(F a ) = a 
and order (0) = +oo. 

The notion of "Herbrand interpretation of a program" can now be generalized: 

Definition 4.4 An (infinite-valued) interpretation I of a program P is a function from 
the Herbrand Base Bp of P to V . 

In the rest of the paper, the term "interpretation" will mean an infinite-valued one 
(unless otherwise stated). As a special case of interpretation, we will use to denote 
the interpretation that assigns the F value to all atoms of a program. 

In order to define the notion of model of a given program, we need to extend the 
notion of interpretation to apply to literals, to conjunctions of literals and to the two 
constants true and false (for the purposes of this paper it is not actually needed to 
extend I to more general formulas): 

Definition 4.5 Let I be an interpretation of a given program P. Then, I can be ex- 
tended as follows: 

• For every negative atom ~p appearing in P: 



• For every conjunction of literals l±, . . . ,l n appearing as the body of a clause in P: 



Moreover, /(true) = T and /(false) = F . 

It is important to note that the above definition provides a purely logical charac- 
terization of what negation-as-failure is; moreover, it clarifies the difference between 
classical negation (which is simply reflection about 0) and negation-as-failure (which is 
reflection about followed by a step towards 0). The operational intuition behind the 
above definition is that the more times a value is iterated through negation, the closer 
to zero it gets. 

The notion of satisfiability of a clause can now be defined: 

Definition 4.6 Let P be a program and I an interpretation of P. Then, I satisfies 
a clause p <— Z l5 . . . , l n of P if I(p) > /(Z l5 . . . , l n ). Moreover, I is a model of P if I 
satisfies all clauses of P. 



I(~P) 



T a+1 ifI(p)=F a 
F a+ i if I(p) = T a 
i//(p)=0 



. . . , l n ) 



min{I(h), . . .,I(l n )} 
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Given an interpretation of a program, we adopt specific notations for the set of predicate 
symbols of the program that are assigned a specific truth value and for the subset of 
the interpretation that corresponds to a particular order: 

Definition 4.7 Let P be a program, I an interpretation of P and v G V. Then I \\ v — 
{p G Bp | I(p) = v}. Moreover, if a is a countable ordinal, then I%ct = {(p, v) G / | 
order (v) = a}. 

The following relations on interpretations will prove useful in the rest of the paper: 

Definition 4.8 Let I and J be interpretations of a given program P and a be a count- 
able ordinal. We write I = a J, if for all (3 < a, L \\ Tp = J \\ Tp and I || Fp — J \\ Fp. 

Example 4.9 Let I = {(p, T ), (q, Ti), (r, T 2 )} and J = {(p, T ), (q, Ti), (r, F 2 )}. Then, 
I =i J, but it is not the case that I = 2 J. 

Definition 4.10 Let I and J be interpretations of a given program P and a be a count- 
able ordinal. We write I \Z a J, if for all [3 < a, I —p J and either I || T a C J || T a and 
I || F a D J || F a , or I || T a C J || T a and I || F a Z) J || F a . We write I C Q J if I — a J 
or I \Z a J. 

Example 4.11 Let I = {(p, T ), (q, Tj, (r, F 2 )} and J = {(p, T ), (q, T ± ), (r, T 2 )}. Ob- 
viously, I C 2 J- 

Definition 4.12 Let I and J be interpretations of a given program P. We write I Coo 
J, if there exists a countable ordinal a such that I \Z a J- We write I J if either 
I = J or I IZqo J. 

It is easy to see that the relation on the set of interpretations of a given program, 
is a partial order (ie. it is reflexive, transitive and antisymmetric). On the other hand, 
for every countable ordinal a, the relation is a preorder (ie. reflexive and transitive). 
The following lemma gives a condition related to which will be used in a later 
section: 

Lemma 4.13 Let I and J be two interpretations of a given program P. If for all p in 
P it is I(p) < J{p), then I J. 

Proof. If / = J then obviously / J. Assume I ^ J and let a be the least 
countable ordinal such that l%a ^ J%a. Now, for every p in P such that J{p) = F a , 
we have I{p) < F a . However, since / and J agree on their values of order less than a, 
we have I(p) = F a . Therefore, / || F a D J || F a . On the other hand, for every p in P 
such that I(p) = T a , we have J(p) > T a . Since / and J agree on their values of order 
less than a, we have J{p) = T a . Therefore, i" || T a C J \\ T a . Since l%a ^ J$a, we get 
I \Z a J which implies / J. 11 
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The relation will be used in the coming sections in order to define the minimum 
model semantics for logic programs with negation-as-failure. 

Example 4.14 Consider the program P: 

p <- ~q 
q <— false 

It can easily be seen that the interpretation Mp = {(p, Ti), (q, F )} is the least one 
(with respect to ^oo) among all infinite-valued models of P. In other words, for every 
infinite-valued model N of P, it is M P N . 

We can now define a notion of monotonicity that will be the main tool in defining the 
infinite-valued semantics: 

Definition 4.15 Let P be a program and let a be a countable ordinal. A function $ from 
the set of interpretations of P to the set of interpretations of P is called a-monotonic 
iff for all interpretations I and J of P , I C tt J =>- $(/) C a $(</). 

Based on the notions defined above, we can now define and examine the properties of 
an immediate consequence operator for logic programs with negation-as-failure. 

5 The Immediate Consequence Operator 

In this section we demonstrate that one can easily define a Tp operator for logic pro- 
grams with negation, based on the notions developed in the last section. Moreover, 
we demonstrate that this operator is a-monotonic for all countable ordinals a. The a- 
monotonicity allows us to prove that this new Tp has a least fixpoint, for which however 
uj iterations are not sufficient. The procedure required for getting the least fixpoint is 
more subtle than that for classical logic programs, and will be described shortly. 

Definition 5.1 Let P be a program and let I be an interpretation of P. The operator 
Tp is defined as follows: 1 

T P (l)(p) = lub{l(h, ...,/„) | P <- h,..., l n E P} 

Tp is called the immediate consequence operator for P. 

The following lemma demonstrates that Tp is well-defined: 

Lemma 5.2 Every subset of the set V of truth values has a least upper bound. 

■"■The notation Tp(I)(p) is possibly more familiar to people having some experience with functional 
programming: Tp(I)(p) is the value assigned to p by the interpretation Tp(I). 
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Proof. Let Vp and Vp be the subsets of V that correspond to the false and true values 
respectively. Let S be a subset of V. Consider first the case in which SnVr is nonempty. 
Then, since Vp is a reverse well-order, the subset S H Vt must have a greatest element, 
which is clearly the least upper bound of S. 

Now assume that S fl Vt is empty. Then, the intermediate truth value is an upper 
bound of S. If there are no other upper bounds in Vp, then is the least upper bound. 
But if the set of upper bounds of S in Vp is non empty, it must have a least element, 
because Vp is well ordered; and this least element is clearly the least upper bound of S 
in the whole truth domain V. I 

Example 5.3 Consider the program: 

p «- ~q 
p «- ~p 
q <— false 

and the interpretation I = {(p, T ), (q, Xi)}. T/ien, Tp(I) = {(p, F 2 ), (q, F )}. 
Example 5.4 For a more demanding example consider the following infinite program: 



Po <- 


- false 


q *- 


Po 


Pi «- 


- ~p 


q <- 


Pi 


P2 «" 


- ~Pi 


q «- 


P2 


P3 «" 


- ~P2 


q «- 


P3 



Let I = {(q, Fq), (p , F ), (p 1; Fi), (p 2 , F 2 ), . . .}. F/ien ; can fre easz/y seen tnai Tp(I) = 
{(<l,K), (po,F)), (pi,Xi), (p2,F 2 ), . . .}. 

One basic property of Tp is that it is a-monotonic, a property that is illustrated by the 
following example: 

Example 5.5 Consider the program: 

p <- ~q 
q false 

Lei I = {(q, F ), (p, T%)} and J = {(q, Fi), (p, T )}. Clearly, I C J. It can easily 
be seen that Tp(I) = {(q, F ), (p, Ti)} and Fp(J) = {(q, F ), (p, T^)}, and obviously 
T P {I)QoTp{J). 

The following lemma establishes the a-monotonicity of Tp. Notice that a similar lemma 
also holds for the well-founded semantics (see for example |Prz89j ). 

Lemma 5.6 The immediate consequence operator Tp is a-monotonic, for all countable 
ordinals a. 
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Proof. The proof is by transfinite induction on a. Assume the lemma holds for all 
(3 < a. We demonstrate that it also holds for a. 

Let /, J be two interpretations of P such that / C a J. We first establish that the 
values of order less that a remain intact by Tp. Since / C. a J, for all f3 < a we have 
I C./3 J and J C./3 I. By the induction hypothesis, we have that Tp(I) C^ Tp(J) and 
Tp(J) Qf3 T P (I), which implies that T P (I) —p T P (J), for all (3 < a. It remains to show 
that T P {I) || T a C T P {J) \\ T a and that T P (I) \\ F a D T P (J) \\ F a . We distinguish these 
two cases. 

We first demonstrate that Tp(I) \\ T a C Tp( J) || T a . Assume that for some predicate 
p in P it is T P (I){p) = T a . We need to show that T P (J)(p) = T a . Obviously, T P (J){p) < 
T a since T P (I) =@ T P (J), for all (3 < a. Consider now the fact that T P (I)(p) = T a . 
This implies that there exists a rule of the form p <— qi, . . . , q n , ~ w±, . . . , ~ w m in P 
whose body evaluates under / to the value T a . This means that for all q i: 1 < % < n, 
it is I{qi) > T a and for all Wi, 1 < i < m, it is J(~ Wi) > T a (or equivalently, 
I(wi) < F a ). But then, since / C a J, the evaluation of the body of the above rule 
under the interpretation J also results to the value T a . This together with the fact that 
Tp(J)(p) < T a allows us to conclude (using the definition of Tp) that Tp(J)(p) = T a . 

It now remains to demonstrate that T P (I) \\ F a D T P (J) || F a . Assume that for some 
predicate p in P it is T P (J)(p) = F a . We need to show that T P (I)(p) = F a . Obviously, 
T P {I){p) > F a since T P (I) = p T P (J), for all (3 < a. Now, the fact that T P {J){p) = F a 
implies that for every rule for p in P, the body of the rule has a value under J that is 
less than or equal to F a . Therefore, if p <— q±, . . . , q n , ~ wi, . . . , ~ w m is one of these 
rules, then either there exists a q, h 1 < i < n, such that J(g«) < F a , or there exists a 
Wi, 1 < i < m, such that J(~Wi) < F a (or equivalently J{wi) > T a ). But then, since 
I \Z a J, the body of the above rule evaluates under / to a value less than or equal to 
F a . Therefore, Tp(I)(p) < F a . This together with the fact that Tp(J)(p) > F a imply 
that T P (J)(p) = F a . 

I 



It is natural to wonder whether T P is monotonic with respect to the relation C c 
This is not the the following example illustrates: 



Example 5.7 Consider the program: 



p <- ~q 

s <- p 

t <— ~ s 

t <— u 

u <- t 

q <— false 



Consider the following interpretations: I = {(p, Ti), (q, F ), (s, F ), (t, Ti), (u, F )} and 
J = {(p, Ti), (q, F ), (s, Fi), (t, Fi), (u, Fi)}. Obviously, it is I J because I Co J- 
However, we have T P (I) = {(■p,T 1 ),(q,F ),(s,T 1 ),(t,Ti),(u,T 1 )} and also T P (J) = 
{(p, TO, (q, F ), (s, TO, (t, T 2 ), (u, F 1 )}. Clearly, T P (I) ^ T P (J). 
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The fact that Tp is not monotonic under appears to suggest that if we want to 
find the least (with respect to C^) fixpoint of Tp, we should not rely on approximations 
based on the relation C^. The way that this minimum fixpoint can be constructed, is 
described in the following section. 

6 Construction of the Minimum Model Mp 

In this section we demonstrate how the minimum model Mp of a given program P can 
be constructed. The construction can informally be described as follows. As a first 
approximation to Mp, we start with the interpretation that assigns to every atom of 
P the value Fq (as already mentioned, this interpretation is denoted by 0). We start 
iterating the Tp on until both the set of atoms that have a Fq value and the set of 
atoms having a T value, stabilize. We keep all these atoms whose values have stabilized 
and reset the values of all remaining atoms to the next false value (namely Fi). The 
procedure is repeated until the F 1 and 7\ values stabilize, and we reset the remaining 
atoms to a value equal to F 2 , and so on. Since the Herbrand Base of P is countable, 
there exists a countable ordinal 6 for which this process will not produce any new atoms 
having F$ or T$ values. At this point we stop the iterations and reset all remaining 
atoms to the value 0. The above process is illustrated by the following example: 

Example 6.1 Consider the program: 

p <- ~q 

q <— ~r 

s <- p 

s <— ~ s 

r <— false 

We start from the interpretation I = {(p, F ), (q, F ), (r, F ), (s, F )}. Iterating the 

immediate consequence operator twice, we get in turn the following two interpretations: 

{(p,r 1 ),(q,T 1 ),(r,F ),(B,T 1 )} 
{(p,F 2 ),(q,T 1 ),(r,F ),(s,T 1 )} 

Notice that the set of atoms having an F value as well as the set of atoms having a T 
value, have stabilized ( there is only one atom having an F value and none having a T 
one). Therefore, we reset the values of all other atoms to F\ and repeat the process until 
the Fi and Ti values converge: 

{( ? ,F 1 ),( q ,F 1 ),(r,F ),(s,F 1 )} 
{(p,T 2 ),(q,T 1 ),(r,F ),(s,T 2 )} 
{(p,F 2 ),(q,T 1 ),(r,F ),(B,T 2 )} 

Now, the order 1 values have converged, so we reset all remaining values to F 2 and 
continue the iterations: 

{( P ,F 2 ),(q,TO,(r,Fo),(s,F 2 )} 
{( P ,F 2 ),(q,TO,(r,Fo),(s,r 3 )} 
{(p,F 2 ),(q,T 1 ),(r,F ),(s,F 4 )} 
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The order 2 values have converged, and we reset the value of s to F 3 : 



{(p,F 2 ),(q,T 1 ) ) (r,F ),( S ,F 3 )} 
{(p,F 2 ),(q,T 1 ),(r,F ),( S ,T 4 )} 

The fact that we do not get any order 3 value implies that we have reached the end of 
the iterations. The final model results by setting the value of s to 0: 

Mp = {(p,F 2 ),(q,T 1 ),(r,F ),(s,0)} 
As it will be demonstrated, this is the minimum model of the program under C^. 



The above notions are formalized by the definitions that follow. 

Definition 6.2 Let P be a program, let I be an interpretation of P and a a countable 
ordinal. Moreover, assume that I C Q Tp(J) C a Tp(I) C a • • • C a Tp(I) ^ a ■ ■ ■ , n < cu. 
Then, the sequence {Tp(I)} n<L0 is called an a-chain. 



Definition 6.3 Lei P be a program, let I be an interpretation of P and assume that 
{Tp(I)} n<UJ is an a-chain. Then, we define the interpretation Tp (I) as follows: 

I(p) if order (I (p)) < a 
rpu> mM _ J T a ifpe\J n<UJ (T£(I) \\T a ) 

F a+ i otherwise 

The proof of the following lemma follows directly from the above definition: 

Lemma 6.4 Let P be a program, I an interpretation of P and a a countable ordinal. 
Assume that {Tp(I)} n<w is an a-chain. Then, for all n < u, Tp(I) Q a Tp (I). More- 
over, for all interpretations J such that for all n < u, Tp(I) C a J, it is Tp a (I) C a J. 

The following definition and lemma will be used later on to suggest that the interpre- 
tations that result during the construction of the minimum model, do not assign to 
variables values of the form T a where a is a limit ordinal. 

Definition 6.5 An interpretation I of a given program P is called reasonable if for all 
(p, T a ) G I, a is not a limit ordinal. 



Lemma 6.6 Let P be a program and I a reasonable interpretation of P. Then, for 
all n < u), Tp{I) is a reasonable interpretation of P. Moreover, if {Tp(I)} n<UJ is an 
a-chain, then Tp a (I) is a reasonable interpretation of P. 

PROOF. The proof of the first part of the theorem is by induction on n. For n = the 
result is immediate. Assume that Tp(I) is reasonable, and consider the case of Tp +1 (I). 
Now, if (p,T Q ) belongs to T£ +1 (7), where a is a limit ordinal, then there must exist a 
clause p <— B in P such that Tp(I)(B) = T a . But this implies that there exists a literal 
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/ in B such that Tp (/)(/) = T a . If / is a positive literal, then this is impossible due to the 
induction hypothesis. If I is a negative literal, this is impossible from the interpretation 
of ~ in Definition 14.51 

The proof of the second part of the theorem is immediate: if (p,T a ) G Tp a (I) then 
(by the definition of Tp a ) there exists k < u> such that (p,T a ) G Tp(I). But this is 
impossible from the first part of the theorem. I 

We now define a sequence of interpretations of a given program P (which can be thought 
of as better and better approximations to the minimum model of P): 

Definition 6.7 Let P be a program and let: 
M = T- o (0) 

M a = Tp a (M a -x) for successor ordinal a 
M a = Tp t0l (\_\g <a Mp) for limit ordinal a 



where: 



(Up <a ( M M)(p) if this is defined 
F n otherwise 



(L|M /S )(p) = 

I3<a 

The Mq, Mi, . . . , M a , . . . are called the approximations to the minimum model of P. 



From the above definition it is not immediately obvious that the approximations are 
well-defined. First, the definition of Tp a presupposes the existence of an ct-chain (for 
example, in the definition of M one has to demonstrate that {Tp($)} n<UJ is a 0-chain). 
Second, in the definition of \_\p <a Mg above, we implicitly assume that {Jp <a (M/3$f3) is 
a function. But in order to establish this, we have to demonstrate that the domains 
of the relations (3 < a, are disjoint (ie. that no predicate name participates 

simultaneously to more than one M^0). The following lemma clarifies the above sit- 
uation. Notice that the lemma consists of two parts, which are proven simultaneously 
by transfmite induction. This is because the induction hypothesis of the second part is 
used in the induction step of the first part. 

Lemma 6.8 For all countable ordinals a: 

1. M a is well-defined, and 

2. T P (M a ) = a M a . 

Proof. The proof is by transfmite induction on a. We distinguish three cases: 

Case 1: a = 0. In order to establish that the sequence {Tp(0)} n<a; is a 0-chain, we 
use induction on n. For the basis case observe that Co 2p(0). Moreover, if we assume 
that Tp(0) C ^™ +1 (0), using the 0-monotonicity of T P we get that T™ +1 (0) C T™ +2 (0). 
Therefore, for all n < u, 7^(0) C T^ +1 (0). It remains to establish that T P (M ) = M . 

From Lemma 16.41 Xp(0) Co Mq, for all n. By the 0-monotonicity of Tp, we have 
that for all n < co, Tp +1 (0) C T P (M ); moreover, obviously C Tp(M ). Therefore, 
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for all n < uj, Tp(0) Co Tp(Mo). But then, from the second part of Lemma 16.41 
M C Tp(Ma). It remains to show that T P (M ) C M . Let p be a predicate in P such 
that M (p) = F . Then, for all n, Tp(0)(p) = F . This means that for every clause of 
the form p <— B in P and for all n < uj, Tp(0)(i3) = F . This implies that there exists 
a literal / in B such that for all n < uj, Tp(0)(/) = F (this is easily implied by the fact 
that {T£(0)} n <u) is a 0-chain). Therefore, M (l) — F and consequently M (B) — F , 
which shows that Tp(Mo)(p) = Fq. Consider on the other hand a predicate p in P such 
that Tp(Mq) = Tq. Then, there exists a clause p <— B in P such that Mq(B) = Tq. This 
implies that for all literals / in B, Mq(1) = To. But then there exists a k such that for all 
I in £> and all n > k, Tp(0)(/) = T (this again is implied by the fact that {Tp(0)} n<aJ 
is a 0-chain). This implies that for all n > k, Tp(0)(S) = T which means that for all 
n > k, T^ +1 (0)(p) = T . Consequently, M (p) = T . 

Case 2: a is a limit ordinal. Then, M a = 2p a (|_lg<a Mp)- Based on the induction 
hypothesis one can easily verify that the domains of the relations Mgjj/5, (3 < a, are 
disjoint and therefore the quantity |_I/3<q Mp is well-defined (intuitively, the values of 
order less than or equal to (3 in Mp have stabilized and will not change by subsequent 
iterations of Tp). Moreover, it is easy to see that the sequence {Tp(\_\g <a Mp)} n<ul is an 
a-chain (the proof is by induction on n and uses the a-monotonicity of Tp). 

It remains to establish that Tp(M a ) = a M a . We first show that M a \Z a Tp(M a ). 
Since {Tp(\_\p <a Mp)} n<UJ is an a-chain, from Lemma l6~4"l Tp(|J /3<Q Mp) C Q M a , for all 
n < uj. By the a-monotonicity of T P we have that for all n < u, 2p +1 (U/3< Q Mp) C Q 
T P (M a ); moreover, it is \Jp <a M P ^ T P {M a ) (because \Jp <a M P T P (\Jp <a Mp) and 
Tp(Up <a Mp) C a T P (M a )). Therefore, for all n < uj, T£(\Jp <a Mp) C Q T P (M a ). But 
then, by Lemma E31 M a C. a Tp(M a ). Notice that this (due to the definition of C Q ) 
immediately implies that for all (3 < a, M a =p Tp(M a ). 

It remains to show that T P (M a ) C. a M a . It suffices to show that T P (M a ) || T a C 
M a || T a and Tp(M a ) \\ F a D M a \\ F a . The former statement is immediate since (by 
Lemma l6.6|) values of the form T a , where a is a limit ordinal, do not arise. Consider 
now the latter statement and let p be a predicate in P such that M a (p) = F a . Then, 
by the definition of Tp a , we get that for all n > 0, 2p(|_L <Q , Mp){p) = F a . Assume that 
T P (M a )(p) ^ F a . Then, since M a =p T P (M a ) for all < a, it has to be T P (M a )(p) > 
F a . But then this means that there exists a clause p <— B in P such that M a (B) > F a . 
This implies that for every literal / in B, it is M a {l) > F a . But then, by a case analysis 
on the possible values that M a {l) may have, one can show that there exists a k such 
that for all / in B and for all n > k, Tp(|_L <a Mp){l) > F a . In other words, for this 
particular clause there exists a k such that for all n > k, Tp(\_\p <a Mp)(B) > F a . But 
this implies that for all n > k, 7p +1 (|_l/3< a Mp)(p) > F a (contradiction). Therefore, 
T P (M a )(p) = F a . 

Case 3: a is a successor ordinal. Then, M a = Tp a (M a _i). As before, it is straight- 
forward to establish that {Tp(M a _i)} n<UJ is an a-chain. Moreover, demonstrating that 
M a C Q T P (M a ) is performed in an entirely analogous way as in Case 2. Notice that this 
(due to the definition of C a ) immediately implies that for all (3 < a, M a —p T P (M a ). 

It remains to show that Tp(M a ) \Z a M a . For this, it suffices to establish that 
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Tp(M a ) || T a C M Q || T a and T P (M a ) \\ F a D M a \\ F a . Consider the former statement 
and let T P (M a )(p) = T a , for some predicate p in P. Then, since M a =p T P (M a ) for 
all P < a, it has to be M a (p) < T a . Moreover, since T P (M a )(p) = T a , there exists a 
clause p <— B in P such that M a (B) = T a . This implies that for every literal I in B, 
M a (l) > T a . By a case analysis on the possible values that M a (l) may have, one can 
show that there exists a k such that for all n > k, Tp(M Q ,_ 1 )(/) = M a (l). This implies 
that for all n > k, 2^(Af«_i)(B) = Af«(B) = T a . This implies that for all n > k, 
T" +1 (M a „i)(p) > T a and therefore M a (p) > T a . Now, since M a (p) < T a , we conclude 
that M a (p) = T a . 

The proof for the latter part of the statement is similar to the corresponding proof 
for Case 2. 

I 

The following two lemmas are now needed in order to define the minimum model of 
a given program: 

Lemma 6.9 Let P be a program. Then, there exists a countable ordinal 5 such that: 

1. M s || T s = and M 5 \\ F s = 

2. for all /3 < 5, M p \\ 7> ^ or Mg || Fp ^ 

T/izs ordinal 5 is called the depth of P 2 . 

Proof. The basic idea behind the proof is that since Bp is countable and the set of 
countable ordinals is uncountable, there can not exist an onto function from the former 
set to the latter. More specifically, consider the set S of pairs of truth values of the form 
(T a , F a ), for all countable ordinals a. Consider the function F that maps each predicate 
symbol p G B P to (T a , F a ) if and only if p G M a || F a UM a || T a . Assume now that there 
does not exist a 5 having the properties specified by the theorem. This would imply 
that every member of the range of F would be the map of at least one element from 
B P . But this is impossible since B P is countable while the set S is uncountable. To 
complete the proof, take as 8 the smallest countable ordinal a such that M a \\ T a = 
and M a || F a = 0. I 

The following property of 5 reassures us that the approximations beyond Ms do not 
introduce any new truth values: 

Lemma 6.10 Let P be a program. Then, for all countable ordinals 7 > 5, M 1 || T 7 = 
and M 7 || F 7 = 0. 

Proof. (Outline) The proof is by transfinite induction on 7. The basic idea is that 
if either M 7 || T 7 (respectively M 7 || F 7 ) was nonempty, then Ms \\ Ts (respectively 
Ms || Fs) would have to be nonempty. 1 

2 The term "depth" was first used by T. Przymusinski in |Prz89| . 
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We can now formally define the interpretation Mp of a given program P: 



M P (p) 



M s (p) if order(M s (p)) < 5 
otherwise 



As it will be shown shortly, Mp is the least fixpoint of Tp, the minimum model of P 
with respect to Cqo, and when it is restricted to three- valued logic it coincides with the 
well-founded model [vGRS91J. 



7 Properties of Mp 

In this section we demonstrate that the interpretation Mp is a model of P. Moreover, 
we show that Mp is in fact the minimum model of P under C^. 



Theorem 7.1 The interpretation Mp of a program P is a fixpoint ofTp. 



PROOF. By the definition of Mp and from Lemma \(r>.l()\ we have that for all countable 
ordinals a it is M P = a M a . Then, for all a, T P (M P ) = a T P (M a ) = a M a = a M P . 
Therefore, Mp is a fixpoint of Tp. 1 

Theorem 7.2 The interpretation Mp of a program P is a model of P. 

Proof. Let p <— B be a clause in P. It suffices to show that M P (p) > M P (B). We 
have: 

Mp{p) = Tp(Mp)(p) (because Mp is a fixpoint of Tp) 

= lub{M P {B c ) | (p <- B c ) E P} (Definition of T P ) 
> Mp(B) (Property of lub) 

Therefore, Mp is a model of P. 1 

The following lemma will be used in the proof of the main theorem of this section: 
Lemma 7.3 Let N be a model of a given program P. Then, Tp(N) N. 



Proof. Since iV is a model of P, then for all p in P and for all clauses of the form 
p <- B in P, it is N(p) > N(B). But then: 

T P (N)(p) = lub{N(B) | (p <- B)eP}< N(p) 

Therefore, we have that Tp(N)(p) < N(p) for all p in P. Using Lemma 14.131 we get 
that T P (N) Coo N. I 

Theorem 7.4 The infinite-valued model Mp is the least (with respect to ^oo) among 
all infinite-valued models of P. 
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Proof. Let N be another model of P. We demonstrate that Mp C^ N. It suffices to 
show that for all countable ordinals a, if for all (3 < a it is Mp —p N then Mp C a N. 
The proof is by transfinite induction on a. We distinguish three cases: 

Case 1: a = 0. We need to show that Mp C -W- Now, since Mp = M , it 
suffices to show that M C AT. By an inner induction, we demonstrate that for all 
n < u, Tp(0) C N. The basis case is trivial. Assume that Tp(0) C AT. Using 
the 0-monotonicity of T P , we get that Tp +1 (0) C Tp(N). From Lemma 17.31 it is 
Tp(N) iV which easily implies that Tp(N) C Af. By the transitivity of C we get 
that T^ +1 (0) C AT. Therefore, for all n < u, T£(0) C AT. Using Lemma EM we get 
that M C AT. 

Case a is a limit ordinal. We need to show that Mp C a N. Since Mp — a M a , it 
suffices to show that Tp a (]_\Q <a Mp) C a N. This can be demonstrated by proving that 
for all n < u, Tp(|_L <Q Mp) C a N. We proceed by induction on n. For n = the result 
is immediate. Assume the above statement holds for n. We need to demonstrate the 
statement for n + 1. Using the a-monotonicity of T P , we get that rp +1 (|J /g<a Mp) C a 
Tp(N). Now, it is easy to see that for all f3 < a, Tp(N) —p N (this follows from the fact 
that for all (3 < a, M a —p N). From Lemma \7. 31 we also have Tp(N) C^ N. But then 
it is T P (A0 C a N. Using the transitivity of C Q , we get that T r ^ +1 ([_\ p<a Mp) C Q AT. 
Therefore, for all n < u, T^(U /3<Q Mp) C Q A^. Using Lemma El we get that M a C Q AT. 

Case 3: a is a successor ordinal. The proof is very similar to that for Case 2. I 

Corollary 7.5 The infinite-valued model Mp is the least (with respect to C^ among 
all the fixpoints ofTp. 

Proof. It is straightforward to show that every fixpoint of Tp is a model of P (the 
proof is identical to the proof of Theorem 17. 2)1 . The result follows immediately since 
Mp is the least model of P. I 

Finally, the following theorem provides the connection between the infinite-valued 
semantics and the existing semantic approaches to negation: 

Theorem 7.6 Let Np be the interpretation that results from Mp by collapsing all true 
values to True and all false values to False. Then, Np is the well-founded model of P. 

Proof. (Outline) We consider the definition of the well-founded model given by T. 
Przymusinski in |Prz89j . This construction uses three- valued interpretations but pro- 
ceeds (from an algorithmic point of view) in a similar way as the construction of the 
infinite-valued model. More specifically, the approximations of the well-founded model 
are defined in |Prz89j as follows (for a detailed explanation of the notation, see [Prz89 ): 

M = (T h F $ ) 

M a = M a _i U (T Mq _ 1 , F Ma _j) for successor ordinal a 

M » = (U/3<a M /3) U (T U/3<aM/3 ,F U/3<aM/3 ) for limit ordinal a 
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Notice that we have slightly altered the definition of |Prz89j for the case of limit ordinals; 
the new definition leads to exactly the same model (obtained in a smaller number of 
steps). One can now show by a transfinite induction on a that the above construction 
introduces at each step exactly the same true and false atoms as the infinite-valued 
approach. I 



8 A Model Intersection Theorem 

In this section we demonstrate an alternative characterization of the minimum model 
Mp of a program P. Actually, the proposed characterization generalizes the well-known 
model intersection theorem |vK76| ILlo87j that applies to classical logic programs (with- 
out negation). 

The basic idea behind the model intersection theorem can be described as follows. 
Let P be a given program and let M. be the set of all its infinite-valued models. We 
now consider all those models in M. whose part corresponding to T values is equal to 
the intersection of all such parts for all models in Ai, and whose part corresponding to 
Fq values is equal to the union of all such parts for all models in Ai. In other words, 
we consider all those models from Ai that have the fewest possible T values and the 
most F values. This gives us a new set So of models of P (which as we demonstrate 
is non-empty). We repeat the above procedure starting from Sq and now considering 
values of order 1. This gives us a new (non-empty) set S± of models of P, and so on. 
Finally, we demonstrate that the limit of this procedure is a set that contains a unique 
model, namely the minimum model Mp of P. The above (intuitive) presentation can 
now be formalized as follows: 

Definition 8.1 Let S be a set of infinite-valued interpretations of a given program and 
a a countable ordinal. Then, we define f\ a S = {(p,T a ) | VM e S,M(p) = T a } and 
\f a S = {{p, F a ) | 3M e S, M{p) = F a }. Moreover, we define Q a S = (/\ a S) [j(\/ a S). 

Let P be a program and let Ai be the set of models of P. We can now define the 
following sequence of sets of models of P: 

S = {M e Ai | MjjO = Q°At} 

S a = {M G S a -i | M%a = O" for successor ordinal a 

S a = {Me f]p <a $P I M $ a = O a OfKa S p) for limit ordinal a 



Example 8.2 Consider again the program of Example \6.1\ 

p <- ~q 

q <— ~r 

s <- p 

s <— ~ s 

r <— false 
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We first construct the set Sq. We start by observing that one of the models of the 
program is the interpretation {(r, F ), (q, Ti), (p,F 2 ), (s,0)}. Smce £/iis model does not 
contain any T value, we conclude that for all M G So, M || T = 0. Moreover, since 
the above model contains (r,F ), we conclude that for all M G S , (r, F ) G M. But 
this implies that (q, Ti) G M ; for all M <E S (due to the second rule of the program and 
the fact that M \\ T = ®). Using these restrictions, one can easily obtain restrictions 
for the values o/p and s. Therefore, the set So consists of the following models: 

5 = {{(r,F ),(q,T 1 ),( V ,v p ),(s,v 3 )} \ F 2 <v p <T 1 ,0<v s <T 1 ,u s >v p } 

Now, observe that the model {(r, To), (q, Ti), (p, F 2 ), (s, 0)} belongs to So- Since this 
model contains only one Ti value, we conclude that for all M G Si, M \\ Ti = {q}. 
Then, the set Si is the following: 

51 = {{(r, F ),(q,Ti),(p, v p ),(s,u s )} | F 2 < v p < T 2 , < v s < T 2 , u s > v p } 
Using similar arguments as above we get that the set S 2 is the following: 

S 2 = {{(r, F ), (q, Ti), (p, F 2 ), (s, -u s )} | < t> s < T 3 } 

In general, given a countable ordinal a, we have: 

S a = {{(r,Fo),(q,T 1 ),(p,F 2 ),(s, Vs )} | < v s < T a+1 } 

Observe that the model {(r, F Q ), (q, Ti), (p, F 2 ), (s, 0)} is the only model of the program 
that belongs to all S a . 

Consider now a program P and let S , S±, . . . , S a , . . .be the sequence of sets of models 
of P (as previously defined). We can now establish two lemmas that lead to the main 
theorem of this section: 

Lemma 8.3 For all countable ordinals a, S a is non-empty. 

Proof. The proof is by transfinite induction on a. We distinguish three cases: 

Case 1: a = 0. Let N* be the following interpretation: 

r To, if VM G M. (M(p) =T ) 
N*(p) = I F , if 3M G M (M(p) = F ) 
[ Ti, otherwise 

It is easy to show (by a case analysis on the value of N*(p)) that iV* is a model of 
program P and therefore (due to the way it has been constructed) that iV* G Si). 

Case 2: a is a successor ordinal. Let N G S a _i be a model of P. We construct an 
interpretation iV* as follows: 

N(p), if order(N(p)) < a 
T a , ifVMe^ (M(p)=T a ) 
F a , if 3M G S a _! (M(p) = F a ) 
T a+ i , otherwise 
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We demonstrate that iV* is a model of P. Assume it is not. Then, there exists a clause 
p <— B in P such that N*(p) < N*(B). We perform a case analysis on the value of 
N*(p): 

• N*(p) = Fp, where (3 < a. Then, there exists M G S a -i such that M(p) = Fp. 
Since M is a model of P, for all clauses p <— in -P, it is M(B>c) < 
Consequently, for every such clause, there exists a literal in Be such that 
M(/ c ) < Fp. But then, it is also N*(l c ) < Fp (by the definition of N* and since 
all models in S a -i agree on the values of order less than a). This implies that 
N*(B C ) < Fp. Therefore, for all clauses of the form p <- B c , it is N*(p) > N*(B C ) 
(contradiction). 

• N*(p) = Tp, (3 < a. Since we have assumed that N*(p) < N*(B), it is N*(B) > 
Tp. This implies that for every literal I in B, it is N*(l) > Tp. But then, given 
any M G S a -i, it is also M{1) > Tp (since all models in S a -\ agree on the values 
of order less than a). Therefore, M(B) > Tp. But then, since M(p) = Tp, M is 
not a model of P (contradiction). 

• N*(p) = T a+1 . Since we have assumed that N*(p) < N*(B), it is N*(B) > T a . 
But then, for every / G B, it is N*(l) > T a . Take now a model M G S a -i such that 
M(p) < T a (such a model must exist because otherwise it would be N*(p) > T a ). 
Now, it is easy to see that for every literal / in B, since it is N*(l) > T a , it is 
M{1) = N*(l). This implies that M(B) > T a . But since M(p) < T a , M is not a 
model of P (contradiction). 

Therefore, iV* is a model of P. Moreover, due to the way it has been constructed, 
N* G S a . 

Case 3: a is a limit ordinal. Let iVo G So, Ni G Si, ... , Np G Sp, . . . , (3 < a, be models 
of P. We construct an interpretation iV as follows: 

N (p) = f (U/9<«(W))(P) if this is defined 
\ T a otherwise 

It is easy to see that jY is a model of P and that iV G f]p <a Sp. This implies that the 
set f]p <a Sp is non-empty (which is needed in the definition that will follow). Now we 
can define an interpretation N* as follows: 



N*(p) 



N(p), if order(N(p)) < a 

T a , ifVM ef)p <a Sp(M(p)=T a ) 

F a , if3Mef]p <a Sp(M(p)=F a ) 

T a+ i, otherwise 



Then, using a proof very similar to the one given for Case 2 above, we can demonstrate 
that N* is a model of P. Due to the way that it has been constructed, it is obviously 
N* G S a . I 

Lemma 8.4 There exists a countable ordinal 5 such that if M G S§ then: 
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1. M$5 = 0, and 



2. for all 7 < 5, M| 7 ^ 0. 

Proof. Since Bp is countable, there can not be uncountably many S a such that if 
M G S a , M%a 7^ 0. Therefore, we can take S to be the smallest ordinal that satisfies 
the first condition of the lemma. 1 

We can now demonstrate the main theorem of this section which actually states that 
there exists a unique model of P that belongs to all S a : 

Theorem 8.5 f] a S a is a singleton. 

Proof. We first demonstrate that f] a S a can not contain more than one models. As- 
sume that it contains two or more models, and take any two of them, say iV and M. 
Then, there must exist a countable ordinal, say 7, such that 7^ M$7. But then, N 
and M can not both belong to 5 7 , and consequently they can not both belong to f] a S a 
(contradiction). 

It remains to show that f] a S a is non-empty. By Lemma WM, there exists 5 such that 
if M E S s then Mjjtf = (and for all 7 < 5, M#7 ^ 0). Let iV <E S 5 be a model (such a 
model exists because of Lemma r8.3j) . We can now create N* which is identical to N but 
in which all atoms whose value under iV has order greater than 5 are set to the value 0. 
We demonstrate that iV* is a model of the program. Assume it is not. Consider then a 
clause p <— B such that N*(p) < N*(B). There are three cases: 

• N*(p) = Fp, (3 < 5. Then, N(p) = Fp and since N is a model of P, we have 
N{B) < Fp. But this easily implies that N*(B) < Fp, and therefore N*(p) > 
N*(B) (contradiction). 

• N*(p) = Tp, (3 < 5. Then, N(p) = Tp and since N is a model of P, we have 
N(B) < Tp. But this easily implies that N*(B) < Tp, and therefore N*(p) > 
N*(B) (contradiction). 

• N*(p) = 0. Now, if N(p) < then (since iV is a model) it is also N(B) < 0. This 
easily implies that N*(B) < 0. Therefore, N*(p) > N*(B) (contradiction). If on 
the other hand N(p) > then N(p) < T$ (because N*(p) = 0). Now, since iV is a 
model, we have N(B) < T$. But this easily implies that N*(B) < and therefore 
N*(p) > N*(B) (contradiction). 

It is straightforward to see that (due to the way that it has been constructed) iV* e S a 
for all countable ordinals a. Therefore, N* e f] a S a . 1 

Finally, we need to establish that the model Mp of P produced through the Tp 
operator coincides with the model produced by the above theorem: 

Theorem 8.6 f\ S a = {M P } 
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Proof. Let N* be the unique element of f\ a S a . Intuitively, due to the way that it has 
been constructed, N* is "as compact as possible" at each level of truth values. More 
formally, for every model M of P and for all countable ordinals a, if for all /3 < a it 
is N* =p M, then iV* C. a M (the proof is immediate due to the way that the sets S a 
are constructed). Then, this implies that N* M. Take now M to be equal to Mp. 
Then, N* C M Mp and also (from Theorem 17. 4|) Mp N*. But since is a partial 
order, we conclude that iV* = Mp. I 



9 Discussion 

In this section we argue (at an informal level) that the proposed approach to the se- 
mantics of negation is closely related to the idea of infinitesimals used in Nonstandard 
Analysis. Actually, our truth domain can be understood as the result of extending the 
classical truth domain by adding a neutral zero and a whole series of infinitesimal truth 
values arbitrarily close to, but not equal to, the zero value. 

Infinitesimals can be understood as values that are smaller than any "normal" real 
number but still nonzero. In general, each infinitesimal of order n + 1 is considered 
to be infinitely smaller than any infinitesimal of order n. It should be clear now how 
we can place our nonstandard logic in this context. We consider negation- as-failure as 
ordinary negation followed by "multiplication" by an infinitesimal e. T\ and F\ can be 
understood as the first order infinitesimals eT and eF, T 2 and F2 as the second order 
infinitesimals e 2 T and e 2 F, and so on. 

Our approach differs from the "classical" infinitesimals in that we include infinites- 
imals of transfinite orders. Even in this respect, however, we are not pioneers. John 
Conway, in his famous book On Numbers and Games, constructs a field No extending 
the reals that has infinitesimals of order a for every ordinal a - not just, as our truth 
domain, for every countable ordinal. Lakoff and Nunez give a similar (less formal) con- 
struction of what they call the granular numbers |LN00j . It seems, however, that we are 
the first to propose infinitesimal truth values. 

But why are the truth values we introduced really infinitesimals? Obviously eT is 
smaller than T, e 2 T is smaller than eT, and so on. But why are they infinitesimals - on 
what grounds can we claim that eT, for example, is infinitely smaller than T. In the 
context of the real numbers, this question has a simple answer: e is infinitely smaller 
than 1 because n * e is smaller than 1 for any integer n. Unfortunately, this formulation 
of the notion of "infinitely smaller" has no obvious analogue in logic because there is no 
notion of multiplying a truth value by an integer. 

There is, however, one important analogy with the classical theory of infinitesimals 
that emerges when we study the nonstandard ordering between models introduced. 
Consider the problem of comparing two hyperreals each of which is the sum of infinites- 
imals of different orders, ie. the problem of determining whether or not A < B, where 

A = a + ai * e + a 2 * e 2 + a 3 * e 3 H and B = b + b 1 *e + b 2 *e 2 + b 3 *e 3 -\ (with the 

Oj and bi standard reals). We first compare ao and bo. If ao < &o then we immediately 
conclude that A < B without examining any other coefficients. Similarly, if ao > b Q 
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then A > B. It is only in the case that oq — bo that the values a\ and b\ play a role. If 
they are unequal, A and B are ordered as a x and b 1 . Only if ai and bi are a/so equal do 
we examine a 2 and 62, and so on. 

To see the analogy, let / and J be two of our nonstandard models and consider the 
problem of determining whether or not / J. It is not hard to see that the formal 
definition of / (given in Section 4) can also be characterized as follows. First, 
let I be the finite partial model which consists of the standard part of / - the subset 
/ || T U I || F of I obtained by restricting I to those variables to which I assigns 
standard truth values. Next, I± is the result of restricting / to variables assigned order 
1 infinitesimal values (Ti and Fx), and then replacing 7\ and i*\ by T and F (so that 
I± is also a standard interpretation). The higher "coefficients" h,h, ■ ■ ■ are defined in 
the same way. Then (stretching notation) I = J + I\ * e + I 2 * e 2 + • • • and likewise 
J = Jq + Ji * e + J2 * e 2 + • • • . Then to compare / and J we first compare the standard 
interpretations Iq and J using the standard relation. If I C 'h, then I C.^ J. But 
if Iq = J , then we must compare I\ and J±, and if they are also equal, I 2 and J 2 , and 
so on. The analogy is actually very close, and reflects the fact that higher order truth 
values are negligible (equivalent to 0) compared to lower order truth values. 

It seems that the concept of an infinitesimal truth value is closely related to the 
idea of prioritizing assertions. In constructing our minimal model the first priority is 
given to determining the values of the variables which receive standard truth values. 
This is the first approximation to the final model, and it involves essentially ignoring 
the contribution of negated variables because a rule with negated variables in its body 
can never force the variable in the head of the clause to become T . In fact the whole 
construction proceeds according to a hierarchy of priorities corresponding to degrees of 
infinitesimals. This suggests that infinitesimal truth could be used in other contexts 
which seem to require prioritizing assertions, such as for example in default logic. 
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